Yes it would try to copy itself onto other blockchains running critical systems - But each system is spread across multiple computers.
So it needs to infect all of them, to infect 1 network.
Then with consensus, if the system did actually get in we could simply revert to the old system and the AI exists on that chain no more.